Build and maintain the security foundation for Ubuntu, helping it meet standards such as FIPS 140-3 and Common Criteria, through applied cryptography, Linux security and audit tooling for DISA-STIG and CIS benchmark compliance, collaborating with external organisations and Canonical's kernel team.
Work with the Security Hardening team to achieve and keep security certifications
Extend Linux cryptographic libraries (such as OpenSSL, Libgcrypt and GnuTLS) for FIPS and Common Criteria certification
Work with external security consultants to test and validate kernel and crypto module components
Develop hardening benchmarks and audit and remediation automation with external partners
Contribute to Ubuntu and upstream open source projects
Communicate across and beyond Canonical to improve security posture and deliver solutions on schedule
Requirements
Hands-on experience with low-level Linux cryptography APIs and debugging
Strong software engineering fundamentals, including C development
Hands-on Linux system administration and shell scripting experience
Knowledge of security and cryptography fundamentals, and experience writing secure code
Significant experience developing with open source libraries
Excellent written and verbal communication for remote-first collaboration
Nice to have: experience with FIPS or Common Criteria certified products and the underlying standards
Nice to have: experience with DISA-STIG or CIS benchmarks, including tools like Compliance as Code
Nice to have: experience working directly with the Linux kernel
Nice to have: experience with Python, OVAL and Ansible
Nice to have: a history of open source contributions
Done for you
We'll apply to this for you
Denidel's HR team submits and tracks the application on your behalf.
